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Amendments tothe Claims : 

1 . (Currently Amended) A method for providing network security, comprising the 
steps of: 

receiving a plurality of network protocol packets, wherein a network protocol 
packet includes a network protocol header and a plurality of network protocol data, and wherein 
the network protocol data include a first cryptographic protocol header and a first plurality of 
encrypted data, at least a portion of at least some of the network protocol packets bein g 
configured in accordance with a transport layer protocol or a network layer protocol : 

determining a first plurality of cryptographic protocol rules associated with the 
network protocol data; 

establishing a cryptographic session, if required by said first cryptographic rules; 

applying the first plurality of cryptographic protocol rules to the first encrypted 
data to obtain a first plurality of cleartext data; 

translating the first plurality of cleartext data into a second plurality of cleartext 
data in accordance with at least one translation rule; and 

encrypting the second plurality of cleartext data in accordance with at least one 
rule associated with a second cryptographic protocol, resulting in a second plurality of encrypted 
data. 

2. (Currently Amended) A system for providing network security, comprising: 
an input module for receiving a plurality of network protocol packets n at least a 

portion of at least some of the network protocol packets being configured in accordance with_a 
transport layer protocol or a network layer protocol : 

a translation module for translating a first plurality of data into a second plurality 

of data; 

an output module; and 

a cryptographic module responsive to the input module and the output module for 
performing cryptographic operations. 
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3. (Currently Amended) A system for providing network security, comprising; 
means for receiving a request to perform a cryptographic operation; 
means for returning a response to the cryptographic operation request; 
means for translating a first plurality of cieartext data into a second plurality of 

cleartexi data in accordance with at least one translation rule: and 

at least one module for performing said cryptographic operation s, said 
cryptographic operations including obtainlim the first plurality of cieartext data based upon a 
first plurality of encrypted data, and encrypting the second plurality of cieartext data 10 obtain a 
second plurality of encrypted data , 

4. (Original) The method of claim 1, wherein the at least one translation rule is 
predetermined. 

5. (Original) The method of claim 1, wherein the at least one translation rule is 
determined dynamically. 

6. (Original) The method of claim 1, wherein the first cryptographic protocol is 

WTLS. 

7. (Original) The method of claim 1 3 wherein the first plurality of encrypted data is 
associated with WML. 

8. (Original) The method of claim 1, wherein second plurality of encrypted data is 
associated with HTML. 

9. (Original) The method of claim 1, wherein the second cryptographic protocol is 
SSL over HTTP. 
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1 0. (Original) The method of claim 1 s wherein the first cryptographic protocol and 
the second cryptographic protocol are identical. 

1 1 . (Original) The method of claim 1 , wherein the first plurality of encrypted data 
and the second plurality of encrypted data conform to different revisions of a specification for 
the same cryptographic protocol. 

12. (Original) The system of claim 3, wherein at least one cryptographic module is a 
cryptographically strong pseudorandom number generator. 

1 3 . (Original) The system of claim 3, wherein the cryptographic operations are 
performed using cryptographic acceleration hardware. 

14. (Original) The system of claim 13, wherein the cryptographic acceleration 
hardware includes a plurality of individual hardware acceleration units. 

15. (Original) The system of claim 14 ? wherein at least one individual hardware 
acceleration unit is dedicated to one function. 

16. (Original) The system of claim 13, wherein the cryptographic acceleration 
hardware is updateable by loading at least one cryptographically signed instruction. 

17. (Original) The system of claim 13, wherein the cryptographic acceleration 
hardware is tamper-resistant 

18. (Original) The system of claim 13, wherein the cryptographic acceleration 
hardware is tamper-evident. 
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